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the key areas of research in WSN-IoT. Existing security and privacy 
research work focuses on cryptography, either which is less efficient, or it 
Keywords: majorly focuses on securing the network, which further leads to exposing the 
nodes to the vulnerability in terms of privacy in the network. This research 


CDPP : develops condition-based distributed privacy-preserving (CDPP) approach to 
Internet of things preserve the sensor node privacy; the CDPP algorithm develops a condition 
Nodes based on which the nodes' vulnerable information is preserved and not 
Secure data transmission accessed by the compromised nodes. CDPP architecture is evaluated 
Wireless sensor network considering the amount of misclassified nodes for safeguarding the node in 


the network. CDPP is evaluated by inducing the corrupt nodes and further 
comparing the model with existing low energy adaptive clustering hierarchy 
(LEACH) based on classification, misclassification and throughput. 
Furthermore, comparative analysis proves the marginal improvisation in 
terms of discussed parameter against existing protocol. 
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1. INTRODUCTION 

To gather and share data, the internet of things (IoT) is a network or hub of machines, objects, and 
devices equipped with sensors and connectivity-enabled technologies. The technology intends to 
revolutionize human existence by boosting internet technology; consequently, its applications in a range of 
lifestyles are expected to increase substantially [1]. The IoT is a new paradigm that enables the internet 
connectivity of multiple smart objects. Actuators and sensors may independently manage and transmit data to 
a system. Wireless sensor networks (WSNs) are an integral component of the IoT and are regularly used to 
collect data from local devices and send it to a central controller for further processing. IoT can benefit from 
WSNs, which can incorporate a range of processing, communication, caching, and sensing smart device 
components [2], [3]. 

WSNs are at the forefront of business, smart home, and environmental monitoring communication 
systems. The small size, low cost, and ease of deployment of this technology give real-time applications far 
more possibilities [1], [2]. WSN application depends on several variables. Even if there is no energy 
constraint, the delivery packets are the most critical factor to consider when building a network for industrial 
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and home automation applications. In hazardous circumstances where batteries are not replaced or recharged, 
such as mines, the network's longevity is the most important design consideration. Nevertheless, the size of 
the deployed zone has a substantial effect on the WSN's design. In smaller regions, the base station or sink 
nodes may directly receive packets from the sensory nodes. In bigger regions, however, packets must pass 
through many intermediate nodes [3]. The IoT-enabled system may link a variety of "things" to provide 
effective data exchange and communication for a single network [4], [5]. Shortly, IoT technology will play a 
crucial role in several industries, including healthcare, manufacturing, logistics, and transportation, as well as 
organizations that support the IoT's critical infrastructure [6]. Nevertheless, sensor nodes have limited 
energy, processing power, transmission range, and onboard memory. Because of these constraints, sensor 
nodes are susceptible to manipulation. Frequently, threats to WSN security emerge from both the outside and 
the inside of the network, with legitimate network nodes being infiltrated and sometimes coerced to act 
maliciously. To guarantee the security of a WSN, malicious nodes must be rapidly recognized, separated, and 
removed. Resolving security issues has had a significant influence on the design and development trends of 
WSNs and attracted a great deal of attention in the literature. 

Due to the increasing complexity of design, it is tough to identify, access, and manage a wide variety 
of device applications and privacy issues. Nonetheless, the rapidly rising complexity of IoT devices causes a 
surge of data. Since private and sensitive information is routinely sent between networks, privacy, and 
security are the fundamental design issues for the IoT [7]. Any attack on a permeable cyber infrastructure 
might endanger the security and confidentiality of huge quantities of sensitive data [8], [9]. Since the 
development of information technology has affected the privacy of individuals, privacy protection strategies 
have been a subject of interest throughout history. Despite the increasing use of edge computing and fog 
concepts for IoT [10], latency, position awareness, connectivity, real-time data sharing, and quality of service 
(QoS) have deteriorated [11]. Data-processing devices on the periphery of IoT pose privacy problems [12]. 
Security is another key element of WSN. Anyone can listen in on the conversation since the data of WSNs is 
transferred freely over the air and accessible through these wireless signals. The wide majority of WSN 
nodes to conduct operations independent side band (ISB) uses the license-free ISB protocol. In both 
commercial and military applications, security is essential to withstand hostile attacks, such as unauthorized 
access and denial-of-service attacks (DoS). 

Information confidentiality: when it is authorized by law, confidentiality implies the right to access 
information. The security of wireless networks is strongly constrained by the radio spectrum's openness and 
accessibility. An adversary may, for instance, recognize and modify the packet being sent. It is usual to only 
transfer data after it has been encrypted using a secret key that is only known to the intended recipients to 
ensure data secrecy. 

Information integrity: a hacker who is familiar with the WSN protocol stack's packet architecture 
may also inject a fresh, deceptive packet into the network between nodes. The information in the packet is 
thus untrue or deceptive. Applications for surveillance, tracking, and environment monitoring are subject to 
compromise when such erroneous data is provided. To get around this issue, people frequently utilize 
message authentication codes, signatures, secret keys, and broadcasting authentication. WSNs are susceptible 
to faults because wireless transmission channels are unstable. Data that is traveling through an impacted 
electromagnetic medium need to be retransmitted due to signal fading, reflection, diffraction, scattering, and 
other types of noise. A considerable number of retransmissions in a WSN could be expensive in terms of 
energy consumption. Data integrity may be ensured via message integrity codes. There are several ways to 
safeguard privacy [13], including both traditional and present deep learning techniques. Existing deep 
learning approaches need expensive computation because they rely on fog/edge computing and the 
significance of their contributions to mission-critical information solutions. 

To protect IoT data against Sybil attacks and DoS, various measures need to be carried out. The two 
types of access level-based cyber risks for IoT critical networks are passive and aggressive attacks [10]. 
Network connectivity is prevented by active attacks, also known as attacks with a security focus, which 
manage to get over the defenses put in place. On the other side, passive attacks aim for networks that ensure 
privacy to get unauthorized access to confidential data. IoT data is increasingly susceptible to hacking and 
organized crime due to its size and constant development. The rise in privacy hazards that target sensitive IoT 
data may be addressed in several practical ways. However, most proposed security measures are never 
implemented, whether because of logistical difficulties, high prices, or other pertinent circumstances. The 
research's contribution in light of the aforementioned issues is as: 

— This research work designs a privacy-enabled secure mechanism named condition-based distributed 
privacy-preserving (CDPP) to protect the nodes' privacy; moreover, CDPP considers the dependability 
and security of the account along with reliability. 

— CDPP is a condition based where the nodes aim to hide the vulnerable information regarding and cannot 
be accessed by compromised nodes. 
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— CDPP is evaluated considering the various compromised nodes to prove the CDPP model; further 
efficiency is proved by comparing with the existing low energy adaptive clustering hierarchy (LEACH) 
protocol for the detection of compromised and non-compromised nodes. 

This research is organized as follows: i) the first section starts with a background of WSN along 
with the importance of security along with privacy, further, the section moves forward with research 
motivation and contribution; ii) the second section presents the existing security technique to preserve node 
privacy along with its shortcomings; iii) CDPP and its mathematical modelling are presented in the third 
section of the research work; and iv) CDPP is evaluated in the fourth section of the research. 


2. RELATED WORK 

Security and privacy have been one of the early issues raised in the research area concerning WSN; 
apart from energy efficiency, it is considered the major area for the researcher to focus on and develop a 
lightweight security model. This section of the research reviews the existing privacy and security aware 
framework developed. The star and tree topologies are combined in this work by Naghibi and Barati [12] to 
offer a safe data aggregation structure. The network is physically divided into four equal parts. A predictable 
and consistent informational star structure is known to each component. Pirbhulal et al. [13] offer a security- 
and dual-resource-aware architecture for internet of medical things (IoMT)-based remote medical systems. 
Medical data is secured using a biometrics-keys generation approach to assure consistency in IoMT and 
lower the system's resource needs. WSNs can benefit from the data aggregation technique created by 
Hasheminejad and Barati [14] based on a tree topology [15]. The plan aims to reduce energy consumption, 
increase network reliability, and prolong network life. This method yields a three-part binary tree as well as 
trustworthy data aggregation and verification. The routing dynamic data integrity (RDDI) approach enhances 
the data distribution and route-finding process [16]. 

Another option for securely sending data is to use a fuzzy hierarchical method. Efficient healthcare 
data aggregation (EHDA) technology makes data aggregation safe and portable [17]. The collecting node 
receives compressed health data from the sensor nodes. The secure and portable sharing of medical data is 
made possible by the use of symmetric key-based data encryption. Compression of healthcare data also 
lowers the cost of storage and transmission. Wang et al. [18] provide a binary tree-aided model for fog-based 
approaches. Sending processed data to the edge node is accomplished using the current method. Many IoT 
and industrial IoT applications employ WSNs, and in this case, the system works better while using fewer 
processing resources from the edge servers. The data aggregation methods employed in this study's industrial 
IoT (oT) are well known in WSNs for their capacity to lower energy usage, according to Li et al. [19]. 
Furthermore, these networks are exposed to a range of dangers due to their wireless connection. As a result, it 
is crucial to protect data while it is being collected. A novel technique for guaranteeing homogenous sensor 
devices in IoT-enabled WSNs is presented by Miao et al. [20], mobile-edge nodes are necessary for this 
technique. 

While acknowledging the high level of consumer spending, Li et al. [21] addresses the problem of 
user privacy and security on two levels. The unique lightweight approach for privacy protection presented in 
Zheng et al. [22] is used to construct two non-colluding cloud platforms and develop a homomorphic 
cryptosystem. Li et al. [23] presents a novel strategy to disguise-based data poisoning attack (DDPA). It is 
determined to use a method in which the negative characteristics are masked to conceal the processes used to 
uncover the truth. In addition, the limitation of maximizing the attack's efficacy is automatically overcome by 
producing optimization issues at the bi-level, which are subsequently addressed by a separate optimization 
approach. Information-theoretical privacy (SEITP) is a unique semantic awareness for the protection of 
privacy in the progression of online location sharing, as outlined in [24], [25]. The highest level of protection 
is offered for both data privacy and semantic awareness. 


3. PROPOSED METHOD 

Secure data aggregation has been one of the efficient approach for securing the WSN, especially 
when the consensus-based protocol is adopted; in previous work, efficient secure aggrigated data (ESAD) 
and integrated data model (IDM) has been developed which solely focuses on the securing the aggregation 
approach while being efficient. However, while securing the data, it is important to preserve the privacy of 
the node especially in consensus-based protocol. This research work adopts the secured data aggregation 
from the previous work and develop a CDPP algorithm that aims at hiding the vulnerable information to the 
compromised nodes. 
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3.1. Preliminary analysis and network design 

The network considered here for (nodes > 2), for communicating nodes with various neighbours, 
the communication topology is captured by a graph known as a communication digraph. A graph here is 
defined as Hg = (X,Y), here X = {x,, X2, X3 .. =.. Xn} with cardinality nodes = |K| = 2 is the set of nodes 
and CE X x X — {(Xp, Xp) |Xp€ X} is the set of edges whose value is depicted by g = |C|. An edge connected 
from the node x, to Xp that is denoted as gpa (Xa Xp) EY, this captures the node x, that receives the 
information from the node x,. The given digraph Hg = (X, Y) connected through the nodes Xp, Xa E X, Xp/= 
Xa, there exists a directed route from x, to Xp. The subset nodes are responsible for directly transmitting 
information to the node Xp is called the set of neighbours of xp depicted as By = {xa E X|(Xp, Xa) E Y}, the 
subset of nodes directly receive information from node xp for a set of neighbours of x, and denoted by B = 
{Xien © X|(Xjen) Xp) E Y}. The cardinality of By is called the in-degree of x, denoted by ap, (a5 = Bp), 
whereas the cardinality of B$ is called the in-degree of xp denoted by af, (af = [Bf |). 


3.2. Designing sensor nodes operation 

At each time step v € Szo, for each node x, E Y retains the state variables g?[v], pP[v], eb [v], here 
gP[v] € S and p2[v] E€ Szo. Here e” is a memoryless function for the states g and p”. By assuming each 
node aware of its neighbors to directly transmit messages to all of them. This cannot necessarily receive 
messages from them. The distributed protocols here, each node x, allocates a unique order in the set 
{0,1, .......,j — 1} for each of the outgoing edges flen, here Xen E BE, specifically to the link (Xien, Xp) for 
node x, depicted by Tien, (where {Then [Xb E Bi} = {0,1, ....., BE —1}). The pre-determined order for 
execution of the proposed algorithm in a way for allowing the node x, to transfer the messages to the 
neighbors in a round-robin fashion. Each node xy in the network has an initial state g,[0] E S. At each step 
v for each node x, € X retains the parameters g,,[v] € Sand p,[v] € Szo and state variables gh[v] € S and 
p? [v] € Szo and eb [v] = gh [v]/ p? [v]. The values of mass variables are updated as (1) and (2), 


golv + 1) = gpl] + Legepe Loa [vl galv] (1) 
pplv +1] = pplv] + Dxgepe Lpa (vlpalv] (2) 


here 1,,[v] = 0 if no message is received at the node x, from the neighbor x, at iteration [v], the following 

cases are encountered. 

— Scenario 1: p,[v + 1] > pe [v], 

— Scenario 2: p lv +1] > pe [v] and g,[v+1] = gł[v] is satisfied, the node x, updates the state 
variables as (3), 


priv + 1] = plv + 1], 
glv + 1] = glv + 1], 


gh [v+1] 
pe [v+ 1] 


ef[v +1] = (3) 


it then transmits g,[v+1], p,[v +1], to an out-neighbor Xien E Bf and set the value g,[v + 1]=0 and 
Pb [v + 1] =0. 


3.3. Problem definition for securing the vulnerable information of nodes 

A connected digraph Hg = (X,Y), where |X| > 3. Here each node xy E X has an initial state of 
g,[0]. The nodes here calculate the exchange of information. The information transfer takes place between 
the nodes aligned with Hg, which represents the system topology. 


Lien=1 JtenI0] 
go (4) 


Any node in this set X, which means that it tries to identify the initial states g [0] for all the subsets 
of nodes in the network. The set X is segmented in two different ways: i) a subset of nodes Xo €E X to ensure 
privacy, the node x, € Xo to retain its initial state gp [0] for other nodes remaining nodes in the set are X, = 
X\Xo are indifferent to privacy and ii) a subset of nodes X. © Xto gather among them in identifying the 
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initial values of various nodes. The nodes herein X, are responsible for not caring about the privacy to share 
the initial state with different nodes in Xį. 


3.4. Condition based distributed approach 

The main objective in the system is to evaluate g whilst ensuring the nodes follow the protocol, the 
approach is focused on the event-triggered deterministic algorithm with some alterations. The main issue is 
the approach deployed that focuses on an offset of the mass variable for each node x, E Xo, to preserve the 
privacy of its initial state g, [0]. In the existing system, the node x, for the initial state to g,[0]=g,[0]+s,, 
here s,€ G. The offset is initially given as dp is a negative number shown as dpES>ọ, henceforth to lead the 
calculations to the initial average after a few finite steps. Each node x, ensures that privacy values like 
dy[v] E Szo to add the steps, Ap E Szo, for the offset added to the counter ap E S>ọ and the transmission 
counter as lp E€ S>ọ. The value of the initial offset dẹ to select greater neighbors B$ to node xy. For initial 
purpose each node selects steps ap whereas the offsets as dp[v] E S>ọ and d,[l,] E Sọ for all a, E 
{0,1,2 ...., ap}. 

In (5), the offset is added is Ap for each node xp which is greater than or equal to the node xy outer 
degree such that each neighbor x, out-degree such that each of its neighbor x, € B$ that receives a single 
value of dp [lp] from node xp. 


Ap = By (5) 


In (6) determines the accumulated offset integrated with the computation by the node x» is equal to 
zero and the exact average of the nodes' initial state is determined without any error. 


dy = — Yr do [la] (6) 


In (7), the offset dp[lp] is injected into the network for each node xp when the event condition is 
triggered that needs to be non-negative to hold for each node after a few steps. The average value of the 
initial state is evaluated. 


d,[l,] = 0,1, E [0, Ay] (7) 


In (8), the node x, stops the offset in the network so that the accurate average of the initial states is 
estimated without any error. 


dpl] = 0,1, E [0, Ap] (8) 


The above choice state that the offset d} for each node xp injects the network to be selected which is 
negative and satisfies d,<—®;. Henceforth ensuring the operation of the proposed mechanism. The event- 
triggered conditions do not hold on to the proposed protocol failing to evaluate the average of the initial state. 
The proposed algorithm has a value transfer process in which each node has a connected digraph Hg = 
(X, Y), which performs executions according to a set of the event- triggered conditions. Each node here 
Xp E Xo to ensure privacy in these steps. 

— A counter ay is set to zero and sets the total number of offset-added steps A, such as Ap = BẸ and the 
set of (Ap + 1) with a positive offset d,[a,] > 0, here a, €E {0,1,2 ...., ap}. The initial negative offset 
value d», injects the initial state value g,[0] to d, = — 2a dplap]. The node x, consists of four-out 
neighbors. 

— To select the Vjen € Bf in the order Hjenp to transmit pp[0] and g,[0] + dp + dp[0] to the out-neighbor. 
Then it sets the value to g,[0] = 0, p,[0] = 0, and ap = ap + 1. 

— The algorithm is executed, at each step v, node x; to receive a set of mass variables g,[v] = 0 and 
palv] = 0 for each-in neighbor x, € Bp. The node x, updates the variables with g,[v] to check if the 
events-triggered condition holds. If true then dp[ap] to galv + 1] and enhances the offset counter ap by 
one. It then sets the variables p? [v + 1] and gh [v + 1] irrespective of p? [v + 1] and gh [v + 1]. Then it 
transmits to an out-neighbor p,[v + 1] and g,[v + 1] to an out-neighbor in pre-trained order. Here xp 
holds the p,[v + 1] and g,[v + 1]. No message is received from any of —its neighbors, and with no 
transmission, the mass variable retains the same. Algorithm 1 presents the conditional approach for 
hiding the vulnerable information for securing the sensor nodes privacy. 
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Algorithm 1. Condition based privacy preserving 
Input: A digraph, Ha = (X, Y) with nodes = |x| and C= |Y| edges, each node x, € X here has an initial state 
of g,[0] € 
Step 1. Initialize each node xy E Xo 
Step 2. A unique ID is assigned Hjenp in the set {0,1,....., oj — 1} for each of its neighbors x), E BE 
Step 3. This sets the counter value qto 0 and priority index wp to qp 
Step 4. Set the counter ay, to 0, selecting Ap E Z >o, here Ap = Be, and d,[v] = 0 for v € {0,1,..., Ap} and 
d,lv’] = 0 for v’ > Ay. To set the value Ay = — dp lap] 
Step 5. This sets the value g,[0] = gp[0] + dy, pp[0] = 1, pł[0] = 1, g?[0]=g,[0] 
Step 6. It then picks the neighbor Vjen E BE such that Hjenb = Wp and transmits p,[0] and g,[0] + d,[0] to 
this out-neighbor. It sets the value g [0] = 0, p,[0],a,p = ap + 1 
Step 7. Set the value qp = qp + 1 and wp = qp mod af 
Iteration: For v = 0,1,2,.......,each node x, E Vp does the following 
This receives g,[v], pa[v] in at least one-neighbor x, E Bp updates the value accordingly. If either 
of the conditions holds; 
This sets g,[v + 1] = dp[ap] + gulv +1] anda, =ap +1 
This sets p2[v +1] = plv + 1], g? [v +1] =g,[v+1] 
głiv+1] 
płiv+1] 
this transmits p [v + 1] and g [v + 1] to out-neighbor 
5y € Bý for which 9), = wy to set the value gp[v + 1] = 0, 
gplv + 1] = 0 and p,[v+ 1] = 0; 
This sets the value qp = qp + 1 and wp = qp mod af 
else it stores gp[v + 1] and p,[v + 1] 
Output: eb [v], for each xp E X 


and eb [v + 1]= 


4. PERFORMANCE EVALUATION 

When the data is aggregated, it is important to preserve the privacy of the nodes especially its initial 
information; thus to preserve the privacy of these nodes, this research develops CDPP mechanism which 
aims to preserve the model’s node privacy. CDPP mechanism seeks to safeguard the privacy of sensor nodes 
and the integrity of the data. Additionally, CDPP is analyzed in consideration for classification and 
misclassification of sensor nodes. It is evaluated with a 2 TB hard drive, 16 GB of RAM, and 2 GB of 
NVidia CUDA-capable graphics. The model provided here analyses an inaccurate identification of a node 
that leads to network inequalities by including many parts, including the classification of the correct node, the 
misclassification of the node, and the computation of the throughput for 10, 15, 20, and 25 nodes. In addition, 
a comparison study between the proposed model and the existing model is undertaken to ensure the model's 
security and efficiency and to conclude that the proposed system outperforms the existing system. 


4.1. Nodes classification 

In this section, the classification of the sensor nodes is carried out wherein a comparison is made 
between the existing system and the proposed system by evaluating the correct identification of nodes with 10, 
15, 20, and 25 nodes. Figure 1 shows the comparison of the stated above; in the context of 10 compromised 
nodes, the existing system detects 91 sensor nodes and the proposed model identifies 100 nodes. Consequently, 
in the context of 15 sensor nodes, the existing system identifies 91 nodes whereas the proposed model identifies 
98 nodes. For 20 sensor nodes, the existing system identifies 87 nodes whereas the proposed model identifies 
91 nodes for 25 nodes the existing system identifies 82 nodes whereas the proposed model identifies 97 nodes. 


4.2. Nodes misclassification 

Figure 2 depicts the misclassified nodes for 10, 15, 20, and 25 sensor nodes. In 10 nodes context, the 
existing model misclassifies 10 wrong nodes whereas the proposed model misclassifies 1 node. In 15 nodes, 
the existing model misclassifies 10 nodes whereas the proposed model misclassifies 3 nodes. In 20 nodes 
context, the existing model misclassifies 14 wrong nodes whereas the proposed model wrongly identifies 
10 nodes for 25 nodes the existing system misclassifies 18 nodes and the proposed model misclassifies only 
13 nodes. 
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4.3. Throughput 

Throughput is defined as the amount of work done in a specific amount of time, it displays the 
models' efficiency; further depicted in Figure 3. In the case of 10 compromised nodes, the throughput of the 
existing model is 0.819 and for the proposed model, it is 0.989010989. In the case of 15 compromised nodes, 
the throughput of the existing model is 0.7735 and for the proposed model, it is 0.915384615. In the case of 
20 compromised nodes, the throughput of the existing model is 0.696 and for the proposed model, it is 
0.83781609 whereas for 25 nodes, the throughput of the existing model is 0.615 and for the proposed model, 
it is 0.887195122. 
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4.4. Comparative analysis 

This section displays the comparative analysis and shows the percentage improvisation for the 
proposed model from the existing model. The improvisation is carried out for 10, 15, 20, and 25 sensor nodes 
the improvisation for 10 nodes is 20.75836252%, improvisation for 15 nodes the improvisation is 
18.34319527% for 20 nodes the improvisation is 20.22724% whereas, the improvisation for 25 nodes is 
44.25936942%. Table 1 shows the improvisation of the CDPP model over the existing mechanism. 


Table 1. Improvisation of the CDPP model over the existing mechanism 
Nodes Improvisation over the existing 


10 20.75836252 
15 18.34319527 
20 20.22724 

25 44.25936942 


5. CONCLUSION 

Sensor node security has been an integral part of any security framework of WSN-IoT; however, 
due to the development of the lightweight protocol, nodes face the exposing of its information, which could 
lead to the compromising position for the data transmission and result in violation of security protocol. This 
research work aims at securing the privacy of sensor nodes deployed in the network; CDPP adopts the secure 
data aggregation from previous work discussed earlier and develops certain conditions to meet the criteria 
that can protect the nodes against compromised nodes. Thus, if the specified conditions are satisfied, 
transmission to neighboring nodes continues; otherwise, transmission terminates. In addition, the CDPP 
architecture is evaluated for misclassification of nodes for 10, 15, 20, and 25 nodes. After calculating 
throughput and comparing the CDPP model to the current aggregation method, it is found that the CDPP 
model comparatively works better with the improvisation of 20.75%, 18.34%, 20.22%, and 44.25% for 
compromised nodes 10, 15, 20, and 25 in a respective manner. In a recent development to the growth of 
attack models based on deep learning, the future of research will involve the adoption of data integrity 
solutions such as blockchain. 
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